<div>
Snort seems to be your best solution. &nbsp;I have been using it in the SBS sector and it seems to do just fine, plus snort is an enterprise solution as well.<br />

</div>


<div>
There are a couple of choices I can recommend:<br />
<br />
Untangle -- Untangle was born with the vision of simplifying and consolidating network functions such as spam, spyware, and virus blocking, web filtering, IPS, and VPN into a single, easy to use solution.<br />
<br />
Site: <a href="http://www.untangle.com/" rel="ugc">http://www.untangle.com/</a><br />
<br />
<br />
Snort -- SNORT is an open source network intrusion prevention and detection system utilizing a rule-driven language, which combines the benefits of signature, protocol and anomaly based inspection methods. With millions of downloads to date, Snort is the most widely deployed intrusion detection and prevention technology worldwide and has become the de facto standard for the industry.<br />
<br />
Site: <a href="http://www.snort.org/" rel="ugc">http://www.snort.org/</a><br />

</div>


<div>
biscuit3,<br />
Thanks for your quick response. &nbsp;Will Snort detect intrusions on clients, the server, and on the network? &nbsp;Does it have an admin console for centralized management? &nbsp;Is it light on system resources?<br />

</div>


<div>
So can I install Snort on the server &amp;&nbsp;workstations in a sensor type of config that then reports back to the Untangle server? &nbsp;Untangle handles the network portion, I just want to find something that covers the clients and the server also.
</div>


<div>
Snort is an in-line network intrusion prevention and detection system that relies on a series of data signatures and rules that is being passed through it. Snort doesn't have client agents for servers nor workstations. <br />
<br />
IPS Definition:<br />
<a href="http://en.wikipedia.org/wiki/Intrusion-prevention_system" rel="ugc">http://en.wikipedia.org/wiki/Intrusion-prevention_system</a><br />
<br />
IDS Definition:<br />
<a href="http://en.wikipedia.org/wiki/Intrusion-detection_system" rel="ugc">http://en.wikipedia.org/wiki/Intrusion-detection_system</a><br />

</div>


<div>
Certain 3rd party all-in-one anti-virus/anti-spyware applications can do what you are looking for. For example, Kaspersky's Open Space Enterprise suites offer a number of services above the basic anti-virus/spyware/malware<wbr /> protection -- not only for SBS and other servers, but workstations as well -- that include a firewall with IDS and IPS capabilities.<br />
<br />
<a href="http://usa.kaspersky.com/products_services/open-space-security.php" rel="ugc">http://usa.kaspersky.com/products_services/open-space-security.php</a><br />

</div>


<div>
How about the open source UTM <br />
<br />
<a href="http://www.untangle.com" rel="ugc">http://www.untangle.com</a>
</div>


<div>
<div class="content wysiwyg-content">
I am looking for a good intrusion detection/prevention solution for the SBS environment. &nbsp;It will need to have server, client, and network scanning. &nbsp;It will also need to have email notification ability and be in a price range that fits the SBS environment. &nbsp;High end enterprise solutions are beyond the scope of this type of environment. &nbsp;10 seats is typical.<br />
<br />
Who are the players in this space? &nbsp;What products work, or don't work? &nbsp;I am seeking opinions based on real world experiences. &nbsp;<br />
<br />
Thanks in advance for the help.<br />
<br />
<br />
<br />
Kevin
</div>
</div>


I am looking for a good intrusion detection/prevention solution for the SBS environment.  It will need to have server, client, and network scanning.  It will also need to have email notification ability and be in a price range that fits the SBS environment.  High end enterprise solutions are beyond the scope of this type of environment.  10 seats is typical.

Who are the players in this space?  What products work, or don't work?  I am seeking opinions based on real world experiences.  

Thanks in advance for the help.



Kevin

IDS/IPS for the SBS environment

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.